[exim] "503 AUTH command used when not advertised" problem

Top Page
Delete this message
Reply to this message
Author: Chad Leigh -- Shire.Net LLC
Date:  
To: Exim User's Mailing List
Subject: [exim] "503 AUTH command used when not advertised" problem
Hi

I have a (customer) Linux machine that was working before I "upgraded"
the Linux from Mandrake 9 to gentoo 2004.2 last night. (The upgrade
basically was to save away /usr/local som /var stuff some /etc stuff
and then wipe / /usr /var and install fresh gentoo, put back the saved
away stuff and run).

I have to exim config files

exim4.conf and exim4-tls.conf

The exim4-tls.conf file looks like:

utah# more exim4-tls.conf

tls_advertise_hosts = *
tls_certificate = /usr/local/etc/exim_key_cert
tls_privatekey = /usr/local/etc/exim_key_cert

.include /usr/local/etc/exim4.conf
utah#

The exim4.conf runs without tls and it works with normal AUTH stuff.
Users can send through it and they authenticate just fine. However, if
they try and enable "SSL" on their client, for their smtp connection,
then sending fails and a debug run of the exim daemon shows:

7433 LOG: smtp_protocol_error MAIN
7433 SMTP protocol error in "AUTH PLAIN
AGNoYWRAdGVzdC5vYmplY3QuY29tAF9zZWlrbzAw" H=([192.168.99.66])
[67.161.247.57] AUTH command used when not advertised
7433 SMTP>> 503 AUTH command used when not advertised
7433 SMTP>> 421 mail.object.com lost input connection

This was working before the upgrade and works without the TLS/SSL stuff
after the upgrade.

It appears the TLS stuff works as we get some SSL stuff in the dbug log

7432 SMTP<< STARTTLS
7432 tls_certificate file /usr/local/etc/exim_key_cert
7432 tls_privatekey file /usr/local/etc/exim_key_cert
7432 Initialized TLS
7432 host in tls_verify_hosts? no (option unset)
7432 host in tls_try_verify_hosts? no (option unset)
7432 SMTP>> 220 TLS go ahead
7432 Calling SSL_accept
7432 SSL_accept was successful

before it does the EHLO/HELO processing and the AUTH stuff.

Any hints or clues on what might be wrong? The exim binary is the same
one after the upgrade. exim was not "emerge"d or anything and it works
on the non-SSL port

Thanks
Chad